Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RvqquzvIfQg35xRfu6vJvdHZ7ZA.roa
File: RvqquzvIfQg35xRfu6vJvdHZ7ZA.roa (raw, json)
Hash identifier: DOxvHLf/t5oMLiYX8hT48oC9x2bAIUSer6Dtp6bMXxQ=
Subject key identifier: 46:FA:AA:BB:3B:C8:7D:08:37:E7:14:5F:BB:AB:C9:BD:D1:D9:ED:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE2890B375D1F39C364DF2882AF0D399F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RvqquzvIfQg35xRfu6vJvdHZ7ZA.roa
Signing time: Sun 25 Feb 2024 23:10:48 +0000
ROA not before: Sun 25 Feb 2024 23:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e2:89:0b:37:5d:1f:39:c3:64:df:28:82:af:0d:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 25 23:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46faaabb3bc87d0837e7145fbbabc9bdd1d9ed90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:4f:dd:5c:74:62:a1:b4:19:5f:ad:79:19:
34:75:7a:1e:b9:3b:55:51:2a:81:5d:37:aa:5f:f2:
4d:67:55:16:ba:2a:e6:e1:21:0b:f2:91:e6:05:74:
74:a3:4e:35:0c:4c:89:11:d9:71:37:35:98:7d:71:
88:6a:9f:a2:5c:e4:98:bf:8b:63:5c:39:7e:50:b1:
83:df:18:74:8b:79:6d:b3:99:c9:3f:d5:75:3a:2d:
45:08:21:da:0c:bf:bb:d7:99:d0:eb:37:5c:c7:ab:
c1:1e:9c:d2:56:3c:2c:99:48:80:52:e0:fb:b8:a6:
68:30:a1:70:f0:44:93:54:60:18:1c:8b:f5:4a:b8:
07:ca:a4:99:80:d7:33:8b:44:12:ff:7d:13:03:d1:
73:34:c7:3b:f0:46:b3:8d:cf:fe:12:83:81:b6:cc:
4f:80:0c:02:a5:7d:6c:14:12:51:1d:db:60:33:9c:
3c:58:4c:0e:2f:2a:12:18:7a:fb:d7:fa:44:19:11:
30:36:3a:b7:ce:4e:f7:e6:a8:02:ee:a1:ec:c2:9b:
55:8c:6b:3b:a2:8f:1a:da:14:01:14:7b:b9:72:5f:
69:dc:3f:ef:a1:2a:90:93:41:6e:f4:60:86:91:0b:
e7:7d:0b:5b:67:fe:b7:76:e0:83:8a:c6:36:f9:6d:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:AA:BB:3B:C8:7D:08:37:E7:14:5F:BB:AB:C9:BD:D1:D9:ED:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RvqquzvIfQg35xRfu6vJvdHZ7ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:e6:a8:57:3a:1d:62:85:51:fa:38:44:2b:63:ea:b1:1a:19:
24:30:49:c0:ab:eb:ab:f8:4f:04:64:4b:fb:92:0b:c3:df:16:
e2:1c:e6:48:96:9c:0b:d8:82:9c:c9:21:e6:3a:59:a7:16:88:
55:9c:86:4b:90:4c:70:6e:51:26:7a:36:40:97:31:71:17:41:
fa:1e:0d:32:50:2b:37:a6:ac:b5:f2:25:62:ef:14:23:04:3f:
b7:06:95:db:77:4b:24:72:64:f4:90:e3:0c:c9:1e:6b:7a:f2:
c3:12:40:5e:64:db:1f:7e:5b:12:81:67:25:bc:d4:33:b7:98:
d8:16:bf:90:ca:72:36:e5:6b:e0:fa:58:8a:c0:27:35:83:5b:
84:18:f3:dc:7c:57:18:2d:33:a2:7e:4f:6a:2e:31:77:80:1a:
46:71:03:9e:a9:23:d1:01:8b:c9:e9:f1:38:87:fe:ca:d8:44:
06:1c:79:72:2f:11:14:28:07:a5:f8:a8:03:55:8e:02:c0:70:
b6:4d:de:6d:aa:b3:08:dd:62:ff:de:8f:b4:cd:1b:a7:59:7a:
9b:52:6e:2c:a0:f5:f6:af:46:47:37:4a:31:c5:b1:26:40:8d:
a9:3c:3e:9e:c9:89:70:31:31:54:fb:53:91:4c:a3:d4:57:22:
43:4d:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:20 2025 by rpki-client